General information only. PIPL, data-export security assessment, standard contract, and certification paths depend on volume, sensitivity, industry, and CAC/local practice. This is not legal advice and does not create an attorney–client relationship. Instruct qualified PRC privacy counsel before you connect global HRIS/CRM instances or ship employee files offshore.
MNC China data compliance cluster: Hub · PIPL checklist (US cos) · Employee data outbound · HR / CRM systems · Export path decision · Sensitive localization · SCC filing · Primary sources · Checklist
Do not rebuild the encyclopedia: use data-export roadmap and PIPL vs GDPR for theory; use this cluster for HR/CRM operating decisions.
Decision order
- Inventory PI flows (hire-to-retire, CRM, vendors) — PIPL checklist
- Classify employee vs customer vs sensitive PI — employee data outbound
- Architecture choice: China instance vs global tenant — HR/CRM systems
- Legal export path — decision tree · SCC costs/timeline
- Sector overlays — auto / health localisation
Action guides
Legal basis & authorities
- PIPL cross-border transfer chapter
- CAC implementing measures on export mechanisms
Verify with primary sources and current regulator practice.
Need counsel on China data export for HR/CRM?
Browse Cross-Border Data Transfer lawyers or Ask a Lawyer with your system architecture diagram and approximate PI volume.